Re: PassiveX is dead?

[HD Moore <hdm () metasploit com>]

On 6/26/2011 1:43 PM, Richard Miles wrote:
> Hi HD Moore,
>
> > > I see. But reverse_https is not able to reuse the same connection from
> > > IE, right? Sor for example, if the IE browser uses a proxy and the
> > > proxy require authentication (integrated on the DC) it will fail,
> > > right?
> >
> > The first stage of reverse_https uses the same information that IE does
> > to make the connection (through the use of WinInet). The second stage
> > does not and this is where work needs to be done.
>
> Do you mean just proxy configuration (host and port), right? I mean,
> if they required NTLM authentication the first stage will fail, right?

The first stage uses WinInet with the PRECONFIG option, which also
includes authentication.

-HD
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework